I haven't fleshed it out completely, but yes, I think at worst it would require, temporary, in memory only storage of the VMs root password to bootstrap the software, with a user specified password applied at the end of the run.